Personal tools
Document Actions

What does "Invalid timestamp The security semantics of the message have expired" mean?

Up to Table of Contents

This FAQ applies to: 5.2

When I try to access a service, I get this error: WSDoAllReceiver: security processing failed; nested exception is: org.apache.ws.security.WSSecurityException: An error was discovered processing the header. (WSSecurityEngine: Invalid timestamp The security semantics of the message have expired. The message is not valid after 2007-11-15T09:02:15.484Z, but the time here on the server is now 2007-11-15T09:02:25.312Z)

Each message sent by the client contains a time-stamp. The server refuses messages sent more than five minutes ago. This is to prevent replay attacks (where an attacker gets hold of a valid message and then sends it again later).

Check the system clock on your server and make sure it's set to the same time as the client machine.


On Linux, you can use the ntpdate command to set the clock to the right time using a time server.


Powered by Plone CMS, the Open Source Content Management System